This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: kIF3XBNocreAD3bwokdu5YR7UKtQiH7aQi8fMJMU090= Subject key identifier: C6:2E:27:D3:0C:63:6D:0E:17:BE:EE:40:16:C8:46:B1:D9:E9:F8:40 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019AF9C245E654473FBC1984919A42CB0625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1424 Signing time: Sun 07 Dec 2025 17:00:49 +0000 Manifest this update: Sun 07 Dec 2025 17:00:49 +0000 Manifest next update: Mon 08 Dec 2025 17:00:49 +0000 Files and hashes: 1: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (hash: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=) 2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 3: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: N2s6KqnnW9qGglbgsxkDhGmT3aQ.roa (hash: 1ZleteROqD8Qub7BlNQREKgEscTZbJHqZvsJY5lTHPU=) 6: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: DBRnd5gmM7vnSa6P47lfGsJFpa0IWCUkJISnUuEbo/g=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c2:45:e6:54:47:3f:bc:19:84:91:9a:42:cb:06:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Dec 7 17:00:49 2025 GMT Not After : Dec 8 17:00:49 2025 GMT Subject: CN=c62e27d30c636d0e17beee4016c846b1d9e9f840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:d8:f3:45:7c:49:71:97:7c:1a:d7:97:ee: d8:fe:28:f8:9e:6b:74:4b:1f:36:df:5f:c8:d0:87: fb:cd:ac:44:16:01:77:80:2a:0c:2f:80:13:79:6e: bb:00:68:07:8e:7d:ae:1e:b4:3a:92:c3:55:08:e0: 96:b9:21:7b:d0:36:0f:d2:74:2b:d6:46:97:f9:22: d3:89:a2:2c:78:6a:61:c5:8a:d1:11:da:d7:60:dd: 01:bc:28:c2:36:67:42:ae:d3:1e:eb:a9:c0:02:fa: 33:1f:a6:0f:c6:03:93:37:54:36:28:08:3c:a3:d8: 4d:b9:77:b4:c7:2b:e3:cf:91:68:b2:1a:50:33:d0: bb:d0:d2:3a:b7:d5:fb:fb:3b:84:b5:68:30:42:56: 9c:a7:03:4b:66:17:8d:dd:62:1b:0f:51:1b:38:aa: bb:43:b7:83:db:6b:fe:3e:1d:ee:18:21:85:f4:32: 30:85:ae:4c:92:73:f1:8c:d9:64:6b:7e:23:e2:bd: f2:26:ed:46:2f:0c:4c:fd:07:8f:ff:c4:ae:3c:80: 23:03:07:31:dc:8c:2a:0a:23:f1:84:b8:35:b0:07: 43:85:ce:52:9b:d6:c9:70:d7:ad:cd:13:29:8e:a4: ff:44:8d:42:ad:67:8e:65:e5:2b:af:2d:2e:6a:6d: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2E:27:D3:0C:63:6D:0E:17:BE:EE:40:16:C8:46:B1:D9:E9:F8:40 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2d:27:9f:25:d0:80:ac:f5:4a:a6:ec:9e:51:d6:3d:af:4a: 73:4f:c3:06:d9:79:ea:27:14:c6:b2:b9:9c:5a:fb:ad:3a:a6: 78:59:39:cd:1f:91:9f:fa:eb:44:f1:b1:87:cc:fa:9a:d0:f4: 1f:d9:6f:ca:48:93:d9:85:e7:88:a4:0f:4c:d9:b6:ae:56:b5: dd:4b:4a:46:64:fe:5e:58:b2:3f:dc:b0:22:a4:03:96:e1:e3: 2d:da:eb:22:69:ba:77:14:1d:13:dc:e6:d1:8f:a4:49:9b:15: a2:45:dc:16:4a:e2:91:62:05:49:25:a1:13:7b:97:5b:dc:e9: 54:f9:ba:54:03:0e:b1:28:e9:91:9d:55:0e:3c:e7:6a:06:51: 4b:05:d3:36:a6:6e:f2:85:f8:c4:57:b2:50:9d:67:a9:5f:82: d8:91:41:5d:92:4b:f7:24:90:5b:4c:43:bc:23:6e:54:9e:9e: f8:b2:ac:8e:28:65:17:4a:22:75:0a:02:e4:75:34:6c:e5:f7: 99:58:3b:9d:2c:e2:0d:46:0d:3f:ac:df:88:19:c4:2f:2f:33: 24:69:2d:44:9c:03:2f:bd:56:08:4d:fa:85:b7:02:ff:0d:a6: 82:43:fc:18:d3:4f:ff:f8:df:77:ee:9b:36:4b:46:66:29:3a: 66:24:fb:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5wkXmVEc/vBmEkZpCywYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUxMjA3MTcwMDQ5WhcNMjUxMjA4MTcwMDQ5WjAzMTEwLwYDVQQD EyhjNjJlMjdkMzBjNjM2ZDBlMTdiZWVlNDAxNmM4NDZiMWQ5ZTlmODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytbY80V8SXGXfBrXl+7Y/ij4nmt0 Sx8231/I0If7zaxEFgF3gCoML4ATeW67AGgHjn2uHrQ6ksNVCOCWuSF70DYP0nQr 1kaX+SLTiaIseGphxYrREdrXYN0BvCjCNmdCrtMe66nAAvozH6YPxgOTN1Q2KAg8 o9hNuXe0xyvjz5FoshpQM9C70NI6t9X7+zuEtWgwQlacpwNLZheN3WIbD1EbOKq7 Q7eD22v+Ph3uGCGF9DIwha5MknPxjNlka34j4r3yJu1GLwxM/QeP/8SuPIAjAwcx 3IwqCiPxhLg1sAdDhc5Sm9bJcNetzRMpjqT/RI1CrWeOZeUrry0uam2mUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYuJ9MMY20OF77uQBbIRrHZ6fhAMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIi0nnyXQ gKz1SqbsnlHWPa9Kc0/DBtl56icUxrK5nFr7rTqmeFk5zR+Rn/rrRPGxh8z6mtD0 H9lvykiT2YXniKQPTNm2rla13UtKRmT+XliyP9ywIqQDluHjLdrrImm6dxQdE9zm 0Y+kSZsVokXcFkrikWIFSSWhE3uXW9zpVPm6VAMOsSjpkZ1VDjznagZRSwXTNqZu 8oX4xFeyUJ1nqV+C2JFBXZJL9ySQW0xDvCNuVJ6e+LKsjihlF0oidQoC5HU0bOX3 mVg7nSziDUYNP6zfiBnELy8zJGktRJwDL71WCE36hbcC/w2mgkP8GNNP//jfd+6b NktGZik6ZiT7iw== -----END CERTIFICATE-----Generated at Sun Dec 7 22:25:03 2025 by rpki-client